How to Report a Suspected Cybercrime in Nigeria

If someone has scammed you online, taken over your account, used your identity or threatened you digitally, do not delete the evidence or send more money. Secure your accounts first, record what happened and report the matter through an appropriate Nigerian authority.

Cybercrime reports may involve online fraud, phishing, unauthorised access, identity theft, cyberstalking, blackmail, fake investment schemes, payment fraud or the misuse of personal information. The right reporting route depends on what happened, but careful documentation is useful in every case.

What to do immediately

Your first priority is to stop further loss. If your bank account, card, wallet or payment application may be compromised, contact the financial institution through its official customer-service channel. Ask whether the transaction can be flagged, restricted or investigated. Use the phone number or website printed on the institution’s official materials—not a number sent to you by the suspected scammer.

Change passwords for affected accounts from a device you trust. Start with your email account because it may be used to reset other passwords. Do not reuse the same password across email, social media, banking and shopping accounts. Turn on multi-factor authentication where available.

If your phone number or SIM may have been taken over, contact your network provider using an official channel. If the device is missing, use the provider’s account-security process and consider remotely locking it. Do not attempt to confront or threaten the person responsible.

Where there is an immediate physical threat, extortion involving danger, or an urgent risk to someone’s safety, contact the police or emergency services promptly. Online crime can become a real-world safety issue.

Preserve evidence before reporting

Investigators need specific details, not only a general statement that you were scammed. Preserve the original evidence as much as possible and avoid editing screenshots.

Collect:

• The date and approximate time of each event.
• Phone numbers, email addresses, usernames, profile links, website addresses and payment details connected to the incident.
• Screenshots of messages, adverts, profiles, receipts, transaction alerts and error messages.
• Bank or payment references, the amount involved and the account or wallet used.
• A short timeline explaining what happened in the order it occurred.
• Copies of relevant emails, including sender details where possible.
• Information about any device, account or file that was accessed without permission.

Keep the original files in a safe location. If you are reporting a suspicious website or social-media account, copy its address exactly. Do not click additional links simply to gather more evidence, and do not download unknown files.

Do not publish sensitive evidence publicly. Redact passwords, one-time passwords, card security codes, recovery phrases and unnecessary identity-document numbers before sharing screenshots online. Never send your PIN, password, OTP or cryptocurrency recovery phrase to someone claiming to investigate the case.

Choose the appropriate Nigerian reporting channel

Nigeria Police Force

A police report is appropriate for many cybercrime complaints, including fraud, threats, harassment, blackmail, identity-related offences, unauthorised access and theft. You can begin at a police station and explain that the complaint concerns a suspected cybercrime. Ask for the complaint to be recorded and keep any reference or acknowledgement provided.

Some cybercrime investigations may be handled or referred to specialist units within the Nigeria Police Force. Describe the incident clearly and take your evidence with you. A police report does not guarantee that money will be recovered, but it creates an official record and may support further investigation.

Economic and Financial Crimes Commission

The Economic and Financial Crimes Commission, commonly known as the EFCC, handles many financial-crime complaints. It may be relevant where the incident involves online fraud, impersonation, advance-fee fraud, fraudulent investment offers or other suspected financial deception.

Use the EFCC’s official complaint process and provide a factual account. Avoid exaggerating the claim or naming a person as guilty when you only have a suspicion. State what you know, what you were told, what you paid and what evidence is available.

Your bank, fintech or payment provider

A report to law enforcement should not replace a report to the organisation that processed the payment. Contact your bank, fintech provider, card issuer, mobile-money service or cryptocurrency platform as soon as possible. Ask for a fraud case to be opened and provide the transaction reference.

Payment providers may have internal procedures for disputed transactions, compromised accounts and unauthorised transfers. Recovery is not guaranteed, especially where a victim authorised a transfer after being deceived, but early reporting gives the provider more useful information.

Other relevant organisations

Depending on the complaint, you may also need to notify your mobile network operator, social-media platform, email provider, employer, school or website administrator. For example, an organisation whose account was impersonated may be able to confirm the genuine account and report the fake one.

Use the platform’s official abuse or account-recovery process. A social-media report can help remove a fraudulent profile, but it is not a substitute for a police or financial-crime report when money, threats or serious harm are involved.

How to write a clear cybercrime complaint

Begin with a direct description: “I am reporting a suspected online fraud involving…” Then provide the facts in chronological order.

1. Identify yourself using the information the reporting organisation requires, but do not include unnecessary secrets such as passwords or PINs.
2. Explain how contact began and what the other person or organisation promised.
3. State the dates, amounts, payment method and transaction references.
4. Describe what happened after payment or after your account was accessed.
5. List the evidence attached and identify any witnesses or affected accounts.
6. Explain the action already taken, such as contacting your bank or changing a password.
7. Ask for an acknowledgement or complaint reference and record the date of submission.

Keep your language factual. A message that looks suspicious may still require verification, and an apparently genuine profile may have been hijacked. Report the conduct and evidence rather than making unsupported accusations.

Common mistakes that can make the situation worse

• Sending more money: Fraudsters may demand a “clearance fee”, “refund charge” or “investigation payment”. Treat unexpected recovery offers with suspicion.
• Deleting conversations: Blocking a scammer may be sensible, but save the evidence first.
• Sharing OTPs or recovery codes: Legitimate banks and platforms do not need your secret authentication codes to receive a complaint.
• Publicly exposing private information: Posting a suspect’s phone number, identification document or private messages can create additional risks and may interfere with a formal complaint.
• Waiting too long to contact the payment provider: Report unauthorised or suspicious transactions promptly.
• Using unofficial investigators: Be cautious of people who promise guaranteed recovery, demand upfront payment or ask for remote access to your device.

A simple reporting workflow

For most incidents, use this order: secure the affected account, contact the bank or payment provider, preserve evidence, report to the police or EFCC as appropriate, report the offending account or website to the relevant platform, and monitor your accounts for further activity.

If your identity documents or personal information were exposed, change affected credentials and watch for unfamiliar account-opening alerts, loan requests, SIM changes or messages sent in your name. Tell close contacts if a compromised account may be used to impersonate you.

What to expect after reporting

Authorities or service providers may ask for additional documents, transaction records, device details or a written statement. Respond carefully and keep copies of what you submit. Investigation timelines can vary, and reporting does not automatically mean that funds will be recovered or that an arrest will follow.

Be patient, but be alert to follow-up scams. Anyone contacting you about the complaint should be verified independently through the organisation’s official channel. Never pay a person simply because they claim to be an investigator or say they can recover your money immediately.

The strongest cybercrime report is prompt, specific and supported by preserved evidence. Secure your accounts, notify the payment provider quickly, use Nigeria’s appropriate law-enforcement channels and protect your confidential security information throughout the process.